You will: · Perform tasks in accordance with all established processes and procedures · Provide recommendations to update existing, or create new, processes and procedures to improve the PKI administration program · Perform PKI administration BAU activities · Review the documentation that formally authorizes individuals to manage, submit and receive PKI certificate requests · Maintain and ensure certificates are up to date and accurate (e.g. help drive annual review) · Setup, maintain and administer any local Certificate Authority, and intermediary Certificate Authority for the organization's use in accordance with NIST 800-53 standards and PKI best practices on an as needed basis · Manage Enterprise Key Management, Certificate Management and PKI systems · Support ad-hoc PKI administration activities of a non-standard nature · Experience with certificate management tools (ideally Microsoft CA and HSMs) · Experience troubleshooting digital certificate issues · Promote and encourage a cyber-aware culture and risk-adverse mindset across the organisation · Align personal development plan with business objectives and embrace the transformation to move the team/department forward
You should have: · A university degree with strong technical background, particularly in IT Security · 3 to 5 years of experience performing security control assessments (i.e. security testing such as security auditing, primary assessor for Security Control Assessments, etc.) · Experience working in groups acting as the sole security practitioner, as well as, experience working in team(s) of various sizes of security personnel reviewing the same system · CISSP, CISA or other equivalent technical cybersecurity certifications will be advantageous · Excellent analytical skills and ability to create and present technical concepts and reports to senior IT management · Hands-on experience with PKI administration and internal certificate authority experience is a must · Experience in Certificate Lifecycle Management managing the entire lifecycle of digital certificates, from issuance and renewal to revocation and replacement · Proficiency in cryptographic protocols such as SSL/TLS, and understanding their implementation in securing communications · Experience with automation tools for certificate management, such as Venafi, DigiCert, or Certbot, to streamline processes and reduce manual effort